PLANAR MONOMIALS IN CHARACTERISTIC 2 



ZACHARY SCHERR AND MICHAEL E. ZIEVE 

Abstract. Planar functions over finite fields give rise to finite pro- 
jective planes and other combinatorial objects. They were originally 
defined only in odd characteristic, but recently Zhou introduced a def- 
inition in even characteristic which yields similar applications. In this 
paper we show that certain functions over F2'- are planar, which proves 
a conjecture of Schmidt and Zhou. The key to our proof is a new result 
about the F^a-rational points on the curve a:'"^ + y''~^ = z''~^ . 



1. Introduction 

Let q = where p is prime and r is a positive integer. If p is odd then a 
planar function on ¥g is a function F: Fg — )• such that, for every d £ F*, 
the function c i— )• F{c + d) — F(c) is a bijection on Fg. Planar functions 
have been used to construct finite projective planes |4j, relative difference 
sets [5], error-correcting codes [l], and S-boxes in block ciphers with optimal 
resistance to differential cryptanalysis [7]. 

If p = 2 then there are no functions F : ¥q ^ Fg satisfying the defining 
property of a planar function, since and d have the same image as one 
another under the map c i— )■ F{c + d) — F{c). Recently Zhou [9] introduced 
a characteristic 2 analogue of planar functions, which have the same types 
of applications as do odd-characteristic planar functions. These will be the 
focus of the present paper. If p = 2, we say that a function F: Fg ^ 
Fg is planar if, for every d £ ¥*, the function c i— )• F{c + d) + F{c) + dc 
is a bijection on F^. Schmidt and Zhou [H |9] showed that any function 
satisfying this definition can be used to produce a relative difference set 
with parameters (g, g, 1), a finite projective plane, and certain codes with 
unusual properties. In what follows, whenever we refer to a planar function 
in characteristic 2, we mean a function satisfying Zhou's definition. 

In the very recent paper [8], Schmidt and Zhou studied planar functions in 
characteristic 2 which have the form c i— )• oc*, where a G F*. They exhibited 
two classes of such planar monomials on Fg where g = 2*": 

• t = 2^ for any > 0, any r, and any a E F* 

• t = 2^ -I- 1 where r = 2k and a = 6^ -|- 6 for any 6 G Fsfc \ F2. 
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They also conjectured [8, Conj. 7] that, when r = 6k and t = 4^ + 16^^, 
there exists a G ¥* such that c i— )• ac* is planar on F2'-. We will prove this 
conjecture in the following more precise form: 

Theorem 1.1. For any positive integer k, write Q = 4^ and q = Q^. If 
a G F* is a (Q — l)-th power but not a 3{Q — l)-th power, then the function 

c I— 7- ac'^^'^^ is planar on ¥q. 

Our proof relies on the following result of independent interest: 

Theorem 1.2. If Q > 1 is a power of 2, and u, f G Fgg satisfy u^~^ + 
v^^^ = 1, then uv is a cube in ¥q3. 

We conclude this introduction with some general remarks about planar 
monomials in characteristic 2. Since c i— )• ac* is planar on F^ if and only if 
c I—)- ac*"*"*^"^ is planar, we will restrict to planar monomials of degree less 
than q. All known planar monomials over F2'- of degree between 2 and 2*^ — 1 
have degree of the form 2* + 2-'. In light of this, we divide the classification 
of planar monomials in characteristic 2 into two parts: 

• monomials of degree 2* + 2-' , and 

• monomials of other degrees. 

We checked via computer that, for r < 14, every planar monomial over F2'- 
of degree between 2 and 2*^ — 1 has degree 2* + 2-' . We suspect that all planar 
monomials over F2'- of degree 2* + 2^ with < i < j < r are displayed in 
Theorem 1 1 . 1 1 and Proposition 13.21 but we cannot prove this. We will present 
results in this direction in Section [3l after proving our main results in the 
next section. 

2. Proof of Theorem 11.11 

In this section we prove Theorem II. li Our proof relies on Theorem II. 2^ 
which we prove first. 

Proof of Theorem \1.2l If Q = 2^ where r is odd, then — 1 = 1 (mod 3), 
so every element of Fga is a cube (since the map c i— )• is a homomorphism 
from ¥q3 to itself which has trivial kernel). Thus the result holds in this 
case, so for the rest of this proof we will assume that Q is a power of 4. Let 
a; be a fixed primitive cube root of unity in Fq. 

Pick u,v G Fq3 such that u^~^ + v'^~^ = 1. We must show that uv is 
a cube in F^g. Write U := u^'^ and V := v^'^. Then U + V = I, and 
both U and V have order dividing Q'^ + Q + 1. We must show that UV is 
a 3{Q — l)-th power in F^a. 

We first dispense with the case that U is in ¥q. IfU £ ¥q then V = U +1 
is also in ¥q, so both U and V have order dividing Q — 1. Thus the orders of 
U and V divide + Q + 1 - (Q - 1){Q + 2) = 3, so U and V are cube roots 
of unity whose sum is 1 . It follows that U and V are distinct primitive cube 
roots of unity, so their product is 1, which is indeed a 3{Q — l)-th power. 
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Henceforth we assume that neither U nor V is in Fg. Let F(x) be the 
minimal polynomial of U over Fq, so F{x) = {x + U){x + U^){x + ). 
ThenF(O) = = 1. Since ^(x+l) is a monic irreducible polynomial 

in Fq[x] which has y as a root, it must be the minimal polynomial of V 
over Fq. Its constant term -F(l) equals = 1. Therefore F(x) + 1 

is a monic degree-3 polynomial in Fq[x] whose roots include and 1, so 
F{x) + 1 = x{x + l){x + h) for some h € Fq. 

Next wc determine the minimal polynomial of UV over Fq. Note that 
UV = U'^ + U. Since U has degree 3 over Fq, we must have U'^ + U ^ Fq, 
so that + U also has degree 3 over Fq. Thus, the minimal polynomial 
of UV over Fq is the unique monic degree-3 polynomial in Fq [x] which has 
UV as a root. This polynomial is G{x) := x^ + + b)x'^ + x + 1, since 

G{U^ + U) = + Uf + + b)iU^ + Uf + U^ + U + 1 

= U^ + U^ + U*{b^ + bJ^i)j^u'^ ^U'\h^ + b+l) + U + 1 

= {U{U + !)([/ + 6) + 1) • + bU^ + {b+ 1)U + 1) 

= F{U) ■ {U^ + bU^ + {b + l)U + 1) 

= 0. 

Since G{x) is the minimal polynomial of UV over Fq, in particular it is 
irreducible. Thus G{1) / 0, so 6 ^ {w,^^}. We will write down the minimal 
polynomials for all of the cube roots of UV. We first give three factorizations 
which might involve polynomials over an extension of Fq: 

G{x^) = Yl {x^ + ex'^ + 1) 

= (a;^ + e^x^ + ex + 1) 

e^=b+u> 

= n {x^ + + ex + l). 

We leave the easy verification of these factorizations to the reader; Magma 
code to verify them is contained in a comment in the TeX file. First suppose 
that one of these three factorizations only involves polynomials in Fq[x]. 
Since the cubes of the roots of G{x^) have degree 3 over Fq, it follows that 
the degree-3 polynomials in this factorization arc irreducible, so that any 
root d of any of these degree-3 polynomials must satisfy = and 

hence must he a {Q — l)-th power in Fgg. Since G{UV) = 0, this implies 
that UV is a 3{Q — l)-th power, as desired. 

It remains to show that one of the three factorizations above only involves 
polynomials in Fq[x]. Equivalently, we must show that one of b + oj'^, 

and 6^ -I- 6 -I- 1 is a cube in Fq. If this did not happen then, since 6^ + 6-1-1 = 
{b + ui){b + co'^), the only possibility is that b + oj and b + oj^ are in the same 
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coset in F^/(F^)3. But then {b + uj^)/{b + uj) would be in (F^)^, so we could 
write (6 + uj'^)/{b + w) = with e G Fg. Now one can easily verify that 
d := (6^ + 6 + l)e^ + + a;)^e + 6^ + 6 is a root of G{x) in Fq (for instance, 
see the Magma code in the TeX file), which is impossible. □ 

Next we prove a lemma expressing the planarity condition for monomials 
in a convenient form. 

Lemma 2.1. Pick any positive integer t and any a G F*, where q > 1 is a 
power of 2 . Then c i— t- ac* is a planar function on ¥g if and only if, for each 
b G F*, the function c i— )• (c + 1)* + c* + ca^^b^^'^ is bijective on Fg. 

Proof. Planarity asserts that, for each d £ ¥*, the function F: c i— t- a(c + 
d)* + oc* + dc is bijective on Fg. Equivalently, ii o f o £2 is bijective, where 
£1 : c I-)- c/{ad*) and £2 - ct-^ dc. Since h°f°h '■ c 1-^ (c+l)* + c* + c/(a(i*~^), 
putting b = 1/d yields the result. □ 

We now prove Theorem ll.il 

Proof of Theorem Let be a positive integer, and write Q = 4^ and 
q = Q^. Let a G F* be a (Q — l)-th power which is not a 3{Q — l)-th power. 

We first show that no d, e G F* satisfy d'^^^^ + d'^-i = a~^e^'^~^. For, 
suppose d, e G F* satisfy this equation. Since a is a (Q — l)-th power, also 
^q2-i ^^Q-i is ^ (Q- l)-th power in F*. But d^^-^ + d'^'^ = d^'^id^-^ + 
1)'^, so we must have d^~^ + 1 = u'^~^ for some u G F*. Now Theorem 11.21 
implies that du is a cube in F*, so d'^~^u'^^~^ = ((iu)'3-i(tt('3~i)/3)3Q-3 is a 
3{Q — l)-th power; but this expression equals a~^e^^~^, which contradicts 
our hypothesis that a is not a 3{Q — l)-th power. 

Thus, for each e G F*, the polynomial ~^ + x'^^^ + a~^e^'^~^ has no 

roots in F*. Since the function c 1— )• c'^^ +c'^ + ca~^e^'^~^ is a homomorphism 
from the additive group of Fg to itself, and the kernel of this homomorphism 
is trivial, the function is a bijection on ¥q. Since (c + l)'3^+'3 + ^Q'^+Q = 

_l_ cQ _l_ 1^ thig implies that c i-)- (c + 1)Q^+Q + c'^^+Q + ca'^e^'^-s jg 
bijection on Fg. For any b G F*, put e = 6(Q+2)/3^ go that 6^*3-3 = 
We have shown that c 1— )• (c + 1)<3^+Q + gQ^+Q -|- ca"-^^*^^"'"'^"^ is a bijection 
on Fg, which by Lemma |2 . 1 1 implies that c 1— )• ac*^ "'"'^ is planar on Fg. □ 

3. Planar monomials of degree 2* + 2^ 

We conclude this paper with some general remarks about planar polyno- 
mials in characteristic 2, and in particular about planar monomials of degree 
2* + 2-^. Here we say that F{x) G ¥q[x] is planar if the function c 1— t- F(c) 
is a planar function on Fg. Since every function Fg — t- Fg is represented by 
a polynomial, in particular every planar function is represented by a planar 
polynomial. Moreover, if F, G G Fg[x] satisfy F{x) = G{x) (mod x'^ — x) 
then F{x) is planar if and only if G{x) is planar. Thus, in order to classify 
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planar polynomials, it suffices to classify their residues mod {x'^ — x), or 
equivalently, to classify planar polynomials of degree less than q. 

If p is any (odd or even) prime other than 3, then (for every r) all known 
planar polynomials over F^r of degree less than have the property that 
the degree of every term is the sum of at most two powers of p. The prime 
p = 3 must be excluded, due to examples from [3]. Planar polynomials 
in which every term has degree the sum of at most two powers of p are 
especially interesting, since a classification of such polynomials would be 
equivalent to a classification of finite commutative semifields [2]. To date, 
there is no p for which there is even a conjectured classification of such 
planar polynomials. However, if we restrict to monomials then the situation 
becomes more tractable. It is easy to see that a monomial of degree is 
planar over F^r if and only if p = 2. Further, it is well-known (and easy 
to prove) that, for any odd prime p and any 0<i<j<r,a monomial 
over ¥pr of degree p^ +p> is planar if and only if r/ gcd(r, j — i) is odd. Our 
Theorem 11.11 shows that the analogous assertion for p = 2 is not true, and the 
complexity of our proof suggests that a classification of planar monomials 
over F2'' of degree 2* + 2^ will likely be difficult to obtain. Here we make 
some remarks about this classification. 

We first reformulate the planarity condition for these monomials: 

Lemma 3.1. Fix < i < j < r and a G Fgr, and put q = 2"^ and G{x) : = 
+ x^^"^. The monomial aa;^*"'"^^ is planar on ¥q if and only if the sets 
G{¥*) and a-i(F*)*-2 are disjoint. 

Proof. Write q = 2^' and t = 2* + 2-'. By Lemma l2.lt planarity asserts that, 
for each 6 E F*, the polynomial F{x) := {x + 1)* + x* + xa~^b*~'^ induces 
a bijection on ¥q. Equivalently, F{x) + 1 induces a bijection on ¥g, and we 
compute 

F{x) + 1 = x^* + x^' + xa-^b^-^. 

Since this polynomial induces a homomorphism from the additive group of 
¥q to itself, it induces a bijection if and only if it has no nonzero roots in 
¥q. Since F{x) + 1 = x{G{x) + a'^*''^), the result follows. □ 

Next we determine all planar monomials of degree 1 + 2^: 

Proposition 3.2. Pick < j < r and a G F2r, and let T{x) 
x"^^ + • • • + X. Then ax^^"^^ is planar on F2r- if and only if j 
T{a''+^) = 0. 

Proof. Let q = 1'' and J = gcd(j, r). By Lemma 13.1^ ax^'*'^^ is planar on Fg 
if and only if there do not exist u, w G F* such that 

1 + u = a V 

Since the set of {2^ — l)-th powers in F* is the same as the set of gcd(2-' — 
1,2'" — l)-th powers, i.e., the (2-^ - l)-th powers, planarity asserts that the 



X^ + 

r/2 and 



6 



ZACHARY SCHERR AND MICHAEL E. ZIEVE 



equation 1 + C/^ ^ = a ^V"^' has no solutions with {/, y € F*. Note that 
the equation z^'^^"^ + x^^^"^ = oT^y^'^ defines a nonsingular curve C in 
of genus g := {2^ — 2) (2"^ — 3)/2. Planarity asserts that C has no Fg-rational 
points with nonzero coordinates. 

First suppose J < r/4:. Then Weil's bound implies that the number of 
Fq-rational points on C is at least 

q+l- 2g^ = g + 1 _ (2-^ - 2)(2^ - 3)^ 

>g+l_(^l/4_2)(gl/4_3)^ 

= 1 + {5q'/^ - 6)^. 

At most 3(2'^ — 1) of these points have a coordinate being zero. Since 

1 + (5gi/^ - 6)^9 > 3^9 > 3(2-^ - 1), 

there is a point in C(Fg) with nonzero coordinates, so ax^^"^^ is not planar 
on F,. 

Since J is a proper divisor of r, the remaining cases are J = r/2 and J = 
r/3. If J = r/2 then j = r/2, and by [6, Thm. 1], there is a point in C{¥q) 
with nonzero coordinates if and only if the canonical additive character x 
on F2J satisfies xi^P ~^^) / 1, or equivalently T(a^ ~^^) / 0. If J = r/3 
then, by [Gj Thm. 2], the curve C has an F^-rational point with nonzero 
coordinates. □ 

Remark. If j = r/2 then the condition T(a^^^^) = can be reformulated 
as asserting that a^^"*"^ = b"^ + b for some b G F23. The number of elements 
a G F2r which satisfy this condition is (2^^^ — 1){2^ + 1). Among these are 
precisely 2^~^ — 1 elements of F*^, namely, the elements of the form b^ + b 

with 6 E F2j \ F2. Planarity of ax^'^'^^ for these latter a's was shown in [51 
Thm. 6]. 

Since the {t — 2)-th powers in F* are precisely the gcd(t — 2,q — l)-th 
powers, Lemma |3 . 1 1 implies that ax^*"^^^ cannot be planar on Fg if gcd(2* + 
2-' — 2, q — 1) = 1. This is a special case of [81 Prop. 9]. It follows that 
there are no planar monomials over F2'- of degree 2 + 2-' if 1 < j < r. 
But we have not gotten much further in determining which monomials of 
degree 2* + 2^ are planar. In particular, we do not know whether there 
any other planar monomials over Fgs of degree Q + Q^, besides the ones 
described in Theorem II. 1[ However, we did verify via computer that the 
planar monomials in Theorem 11.11 and Proposition 13.21 are the only planar 
monomials over F2'- of degree 2* + 2^ with 0<i<j<r<50. 
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